Styles are authored in TypeScript and emitted into the overlay's own shadow root.
The overlay is injected into a page it does not control, so it can neither leak
styles into that page nor inherit them from it.
check-css.mjs is the guard: it fails the build on a raw value where a token
exists, which is the drift that would otherwise accumulate one hex code at a
time.